Easter Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Sure Pass Exam SPLK-1003 PDF

Page: 14 / 14
Total 189 questions

Splunk Enterprise Certified Admin Questions and Answers

Question 53

Social Security Numbers (PII) data is found in log events, which is against company policy. SSN format is as

follows: 123-44-5678.

Which configuration file and stanza pair will mask possible SSNs in the log events?

Options:

A.

props.conf

[mask-SSN]

REX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$"

FORMAT = $1###-##-$2

KEY = _raw

B.

props.conf

[mask-SSN]

REGEX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$"

FORMAT = $1###-##-$2

DEST_KEY = _raw

C.

transforms.conf

[mask-SSN]

REX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$"

FORMAT = $1###-##-$2

DEST_KEY = _raw

D.

transforms.conf

[mask-SSN]

REGEX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$"

FORMAT = $1###-##-$2

DEST_KEY = _raw

Question 54

When using license pools, volume allocations apply to which Splunk components?

Options:

A.

Indexers

B.

Indexes

C.

Heavy Forwarders

D.

Search Heads

Question 55

In addition to single, non-clustered Splunk instances, what else can the deployment server push apps to?

Options:

A.

Universal forwarders

B.

Splunk Cloud

C.

Linux package managers

D.

Windows using WMI

Question 56

Where are license files stored?

Options:

A.

$SPLUNK_HOME/etc/secure

B.

$SPLUNK_HOME/etc/system

C.

$SPLUNK_HOME/etc/licenses

D.

$SPLUNK_HOME/etc/apps/licenses

Page: 14 / 14
Total 189 questions